Experimental demonstration of an efficient quantum phase-covariant cloning and its 
possible applications to simulating eavesdropping in quantum cryptography 
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We describe a nuclear magnetic resonance (NMR) experiment which implements an efficient one- 
to-two qubit phase-covariant cloning machine(QPCCM). In the experiment we have achieved re- 
markably high fidelities of cloning, 0.848 and 0.844 respectively for the original and the blank qubit. 
This experimental value is close to the optimal theoretical value of 0.854. We have also demonstrated 
how to use our phase-covariant cloning machine for quantum simulations of bit by bit eavesdropping 
in the four-state quantum key distribution protocol. 
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The "no-cloning" result Q, 0] asserts that due to the 
linearity of quantum mechanics unknown quantum states 
cannot be copied perfectly. This notwithstanding one can 
design approximate quantum cloning machines and ad- 
dress their optimality. The most notable example is the 
universal quantum doner (UQC) proposed by Buzek and 
Hillery Q. It has been studied in great details 0] and 
a number of experimental implementations of a 1 — > 2 
qubit UQC have been proposed 0, 0, 13 ■ Another im- 
portant example is the optimal quantum phase-covariant 

cloning machine (QPCCM) HEICH Unlike the UQC ' 
it clones only subsets of states for which we have some 
a priori information. In the special case of the QPCCM 
operating on qubits it has been shown that a class of 
states \yb) = (|0) + e lip |1)), called equatorial states, 
can be cloned up to the fidelity 0.854. As expected 
this value is slightly higher than the optimal fidelity of 
the UQC (0.833). This is because even partial infor- 
mation about the original state allows to optimize the 
cloning process and to obtain higher fidelities of the 
clones. The phase-covariant doners, which are the sub- 
ject of this paper, are of significant importance in quan- 
tum cryptography as they provide the optimal eaves- 
dropping technique for a large class of attacks on the 
four state protocol (BB84) 16] . The properties of the 
QPCCM have been extensively studied from the theoret- 
ical perspective ^2 0], however, on the experimental 
side, apart from an interesting recent optical proposal by 
Fiurasek 0], no actual realization of the QPCCM has 
been reported. 

Here we describe the first experimental implementa- 
tion of the QPCCM. We use the NMR technology to im- 
plement a modified two qubit network originally designed 
by Niu and Griffiths [lfj] (see Fig. 1). The simplicity of 
the network allows to reduce the effects of decoherence 
and to obtain remarkably high fidelities of the clones. 



FIG. 1: Quantum network of the efficient phase-covariant 
cloning. It consists of two controlled-NOT gates together with 
one controlled-rotation gate, where R{9) = e _,6,<Ty ' /2 is a ro- 
tation by an angle 9 about the y axis in Bloch-sphere. The 
upper and the lower horizontal lines correspond to the original 
and the blank qubits respectively. 



This is in contrast with earlier approaches which were 
based on more complicated three qubit networks 0. If 
the complexity of related three qubits experiments is of 
any guidance here, e.g. the NMR implementation of the 
UQC , then substantial losses due to inhomogeneities 
of the magnetic field and decoherence cannot be avoided 
with the current state of the art technology. This, to- 
gether with the stringent precision requirements, lowers 
the fidelity (to about inconclusive 58% in A three 
qubit network for for the 1 — > 2 QPCCM, for example 
the one proposed by Fuchs et al. [SJ, would face similar 
problems. 

Our version of the network is shown in Fig. 1. The net 
unitary operator has the form 



U{6) 



( 1 ^ 

cos6> sin6> 

-sine cosfl 

\0 1/ 



When 9 = j, this unitary transform defined as U opt cor- 
responds to an efficient optimal QPCCM. In fact, U opt 
is just a 2-qubit square root of SWAP gate. Consider 
now an equatorial state of a qubit, i.e., a state with a 
definite spin in the direction n = (cos tp, sin tp, 0). This 
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state has the form \n) — -j= (|0) + e l(p whereas the b 
qubit is in the state |0). U opt transforms the input state 
to p°tf = U opt \n) |0) (0| (n\ U opt+ . The reduced density 
matrix of two copies can be calculated (by tracing out 
another qubit) as 



P°a Ut 



out 
Pb 



3/4 V2e-' iV /4 
1/4 



Note that the two copies are in fact symmetric. We 



use the fidelity F = (n\p° 



to define the quality of 



the copies. As expected, the optimal fidelity for 1 
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QPCCM is F°% CM 



0.854, which is higher 



than the optimal value Fq P ^ cm = 0.833. 

This quantum circuit of QPCCM is realized by using 
a two-qubit NMR quantum computer, based on 13 C and 
the H nuclei in Carbon-13 labelled chloroform (Cam- 
bridge Isotopes) dissolved in d6 acetone. The 13 C nu- 
cleus was used as qubit a, and 1 H as qubit b. The re- 
duced Hamiltonian of the 2-spin ensemble is given by 
H = ui a I% + uJblz + 27rJ/"/^, where the first two terms 
describe the free procession of spin a ( 13 C) and b^H) 
around the static magnetic field with frequencies lOOMhz 
and 400 Mhz. 7° (/!?) is the angular moment operator of 
a (b) in direction z, and the third term is the J coupling 
of the two spins with J = 214.5Hz. 13 C nucleus's T\ re- 
laxation time is 17.2s and it's T2 relaxation time is 0.35s. 
1 H nucleus's T\ relaxation time is 4.8s and it's T2 relax- 
ation time is 3.3s. In the following, we describe how we 
experimentally realize the optimal 1 — > 2 QPCCM shown 
in Fig. 1. 

(El) Prepare the initial state: Initially the two qubits 
are in thermal equilibrium with the environment and 
their state is described by the density operator p^h oc 
a% + 4(7^. We use the spatial averaging technique |l9| to 
create the effective pure state | t)a® | T)b, or, in the den- 
sity operator form, |(1 + ct") (g) |(1 + <r^). The sequence 
of operations leading to this state is shown in Fig. 2(a). 
We then perform a single hard ^ radio frequency (rf) 
pulse on a qubit to generate one of the desired equatorial 
state \n(tp)} 1 ™ = (cos ip, sin ip, 0) with p = cos(n7r/12), 
n = {0,l,--- ,23}. 

(E2) Clone the input equatorial state: The quantum 
circuit of optimal 1 — > 2 QPCCM is described in Fig. 1 
by fixing 8 — j. This corresponds to a 2-qubit square 
root of SWAP gate. NMR pulse sequences are developed 
by replacing this operation with an idealized sequence of 
NMR pulses and delays. The resulting sequences are then 
simplified by combining rf pulses appropriately. Figure 
2(b) shows the final pulse sequence to demonstrate the 
optimal 1^2 QPCCM. All the rf pulses are hard pulses 
which hardly affect the state of b qubit due to the het- 
eronuclear sample we used. 

(E3) Measure and analyze: In principle, the quality 
of the copies, defined as fidelity, can be calculated by 
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FIG. 2: NMR pulse sequences. The white and black boxes are 
90° and 180° pulses, while the grey boxes are pulses with other 
flip angles shown above each box; pulse phases and gradient 
directions are shown below each pulse. All rf pulses are hard 
pulses with regtangular shape and 5ms pulse width. Delay 
times are n = 1/(4 J) and r 2 = ■ n/ir. In the QPCCM 
experiment we take 6 = 7r/4 and change the value of 9 G 
[0,2tt]. 



trix of a single qubit and can be obtained from the den- 
sity matrix In NMR, one can use state tomogra- 
phy technique to get p°^ by applying a set of readout 
pulses, but this has the disadvantage of requiring sepa- 
rate experiments. In our experiment, we use a simpler 
method described in Ref.[5j]: we measure the two spectra 
of two output qubits individually, here the receiver phase 
are set with the same phase as that of the input qubit 
measurement. Therefore, the tracing out process can be 
implemented by integrating the entire multiplet in each 
spectrum, comparing to the integration of the input state 
spectrum, we can obtain the relative length of the output 
state vector r', b ^ in the same orientation as its input state 
vector, so the fidelity between the input and output state 



can be calculated as F, 
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). Figure 3 shows 
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where is the reduced density ma- 



the experimental results from cloning the input equato- 
rial state |n(0))™ = (1,0,0). There are three spectra, 
corresponding to the observable NMR signals of one in- 
put state and its two copies, that are measured by setting 
the same receiver phase experimentally. The spectra do 
have similar expected form (in-phase absorption signals 
at the outmost positions of each multiplet). 

An important feature of QPCCM is that all equatorial 
states are cloned equally well and so it is necessary to 
study the behavior of pulse sequence when applied to a 
wide range of states on equator. We have prepared a total 
of 24 input equatorial states \n(p)) a = (cos <p, sin^j, 0) 
by changing the value ip with a spacing of 15° as shown 
in (El). For each input state, we measure its spectrum 
and denote it as a reference to calculate the quality of the 
two copies after the cloning transformation described in 
(E2). Finally we measure each copy and calculate the 
fidelity. Experimentally, we get the mean fidelity of this 
phase-covariant cloning are F a = 0.848±0.015 for a qubit 
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FIG. 3: Experimental spectra of cloning the input state 
\ n (0))™ = (1) 0, 0). The left and middle spectra are the car- 
bon spectra corresponding to the input and output state of 
a qubit, where the vertical scales are in the same arbitrary 
units. The right spectrum is for the hydrogen nucleus repre- 
senting the output of b qubit, where the vertical scale does 
not share the same arbitrary units with those of the carbon 
spectra. From the integration of the each multiplet, we obtain 
the fidelities of the two copies, F a = 0.842 and F b = 0.839. 

and Fi, — 0.844 ± 0.015 for b qubit, which are both close 
to the optimal theoretical value 0.854. 

Compared to the low fidelity of the NMR experiment 
for UQCM 5], our near-optimal fidelity arises from the 
following reasons: (1) Less decoherence effect - the time 
used for cloning in our experiment is about 5.3ms, which 
is well within the decoherence time (about 350ms for 13 C 
nucleus and 3.3s for 1 H nucleus); while the time used for 
UQCM in Ref. [f| was estimated about 400ms, which 
is close to the decoherence time with the value 720ms 
for two 1 H nuclei; (2) Simplicity - it is simpler to re- 
alize our economic 2-qubit QPCCM than to realize the 
3-qubit UQCM in Ref. |5j; (3) Pulses - in our experi- 
ment all the rf pulses are hard pulses, which are more 
perfect than selective pulses, this is simply achieved by 
using heteronuclear sample. In our experiments, small 
errors arise as a result of the inhomogeneity of the static 
with rf magnetic fields as well as the variability of the 
measurement. 

One important application of our efficient QPCCM is 
the quantum simulator of a bit by eavesdropping on the 
four-state protocol of quantum cryptography [n], El- 
(The UQCM plays the same role for the six-state proto- 
cols 0|)- The four-state protocol (also known as BB84) 
uses four quantum states, say \±} x = 4- (|0) ± |1)) and 

|±) a = -4= (|0) ± i |1)), that constitute two maximally 
conjugate bases. Alice chooses one of these four states 
in her qubit (denoted by a) at random, then sends it to 
Bob. Whatever the state is, Eve approximately clone two 
copies of this input state by inserting a 1 — > 2 QPCCM 
in the quantum channel. She then sends one copy to Bob 
and stores another copy in her qubit b. Thereafter, Bob 
measures qubit a in one of the two bases chosen at ran- 
dom. Finally Alice announces publicly the basis she used 
for transmission of the signal, and in those cases in which 
Bob measures in the same bases (these cases are useful, 
the others are discarded by Alice and Bob). Eve, who 
now knows the bases Alice employed, measures b qubit 
in order to estimate which signal Alice sent. 

Experimentally, we realize the above process of eaves- 



3 



0.6 




-0.6-K 1 1 1 1 1 1 1 1 1 1 1 r-> \ 1 1 . 1 1 1 ■ 1 ■ 1 1 r 

01234560123456 

9 [rad] 6 [rad] 



FIG. 4: The normalized observable NMR signals (a) versus 
the rotation angle 9 of the phase-covariant cloning machine, 
for two bases, X-base(at Left) and y-base(at right). The lines 
correspond to theoretical calculation. The filled and empty 
boxes (circles) correspond to the experimental measurement 
from a qubit (b qubit), while the filled (empty) circles and 
boxes correspond to the input state is |+) (|— )). 

dropping attack as following: (1) Prepare one of four 
BB84 states by using the same method that we described 
in (El); (2) Perform the quantum 1 2 QPCCM de- 
scribed in Fig. 1. The pulse sequence to realize the 
network is shown in Fig. 2(b). Note that 9 is not fixed 
to 7r/4 as in the previous optimal 1 — > 2 QPCCM real- 
ization, we set various rotation angles 6 € [0, 27r] of the 
pulse [marked as grey box in Fig. 2(b)] with a space of 
ir/ 12; (3) For each experiment, we perform two measure- 
ments of the NMR observable signals ((Ji) for Bob and 
Eve individually, here i G [x, y] is the same base as that 
of the input state. Recall another measurement for the 
input state which is used as reference spectra, there are 3 
measurements. Totally, we perform 4 x 24 x 3 = 288 ex- 
periments distinguished by 4 BB84 states and 24 rotation 
angles 8 £ [0,27r] and 3 measurements. Theoreically, if 
Alice sends the state \±) x , Bob measures (erf ob ) = 
and Eve measures (<J^ ve ) = ±^§^ in X-base; if Alice 
send state |±) y , Eve measures {<?y Ve ) — while 
Bob measures (<7 y 3ob ) = ±^ in Y-base. Both the the- 
oretical and experimental results are plotted in Fig. 3, 
where the symmetry between |+) and | — ) in each base is 
clearly seen. 

A main concern of the eavesdropping is to determine 
how much information an eavesdropper can obtain from 
a given level of noise. For the above optimal eavesdrop- 
ping attack, regardless of the input BB84 state, Bob 
guesses correctly the state sent by Alice with proba- 
bility Fsob = \ + (< 7 f ob ) an d makes an error Dsob = 
1 - F Bo b = I — {&f ob ), where i e {x,y} is one of 
the maximally conjugate bases; while Eve guesses cor- 
rectly the state sent by Alice with probability Fsve = 
5 + ( a F ve ) an d makes an error De V c = 5 — { a f ve )- 
As we know, the mutual information is defined as I — 
\ + D log 2 D + (1 — D) log 2 (1 — D). From our experi- 
mental dates shown in Fig. 4, we extract the Alice-Bob 
and Alice-Eve mutual information as a function of the 



4 




0.0 0.1 0.2 0.3 0.4 0.5 
quatum bit error rate(QBER) 



FIG. 5: Mutual information versus the quantum bit error 
rate. The lines correspond to theoretical calculation. The 
boxes correspond to the experimental obtained mutual infor- 
mation of Alice and Bob (a qubit), while the circles corre- 
spond to the experimental mutual information of Alice and 
Eve (b qubit). 

value of noise (QBER) denned as QBER = ±=f^. Here 
0G [0, 7r/2] characterize the strength of Eve's attack. The 
experimental results are shown in Fig. 5. We show the 
relation between the mutual information and QBER, in 
agreement with the theoretical results. 

In summary, we provide the first experimental demon- 
stration of an efficient and nearly optimal 1 — > 2 QPCCM 
by using a 2-qubit NMR quantum computer. Our ap- 
proach cannot be extended to the UQC as it is known 
that a 3-qubit 1—^2 UQC cannot be reduced to an 
efficient 2-qubit network [13j. However, our efficient 
QPCCM has potential applications as a simulator of 
eavesdropping techniques in quantum key distributions. 
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